An individual who posted data allegedly stolen via MOVEit from Amazon and other big-name firms claims not to be malicious

ESET researchers introduce the Gamaredon APT group, detailing its typical modus operandi, unique victim profile, vast collection of tools and social engineering tactics, and even its estimated geolocation

Microsoft has addressed four zero-day vulnerabilities this month, two of which have been exploited

The TA455 phishing campaign used fake job offers on LinkedIn to deploy malware

New phishing tool GoIssue targets GitHub, enabling mass phishing, and has been linked to the GitLoker extortion campaign

Panaseer claims 72% of security leaders are taking out personal indemnity insurance as board scrutiny increases

watchTowr has found a flaw in Citrix’s Session Recording Manager that can be exploited to enable unauthenticated RCE against Citrix Virtual Apps and Desktops

Over the past decade, developers have been forced to choose between two evils: either accept Big Cloud’s complexity, costs, and lock-in, or struggle and lose precious time building everything from scratch. Like code itself, it was a binary decision.